2afd325e7c80c2976e06e8bc15acf61dd0426661282eea24317d07cbbc0c3bf7

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/08/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 62KB
Sample260815-aqd86sch79
SHA256 2afd325e7c80c2976e06e8bc15acf61dd0426661282eea24317d07cbbc0c3bf7
MD5 99f991463046577b6fd3e27104d9a5a6
SHA1 14ca84e892527ef12d4799f92db4059fc8a4dbf6
SHA512 18dbbb7048bbc4ffe6460de56dc031ca6374e96a8b29674455050040fe19908bd38da11c1f8cab2a7b376380b62790a5afad11873da06306e068c5116a278163
SSDEEP 768:M9zZU+uoSAQuGy26Z2a5h9vFVz4DdF7EYD4ayjr0/YldZTNxuosfubsD9xJ/r4qW:M7FGy26ZfVz4DdFnByjrkP01xI6
TLSH
T12C53C720AAD6582A6233C15AF230F6ACFF49D047D3122999B4ADB72F9FF5D60157321C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
8	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312270986641718"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{7EEB347C-2CBE-45BE-A0EE-B873171FD98F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4756	msedge.exe
4756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1116 wrote to memory of 1032	1116	msedge.exe	85
PID 1116 wrote to memory of 2384	1116	msedge.exe	86
PID 1116 wrote to memory of 8	1116	msedge.exe	87
PID 1116 wrote to memory of 2384	1116	msedge.exe	86
PID 1116 wrote to memory of 2384	1116	msedge.exe	86
PID 1116 wrote to memory of 4248	1116	msedge.exe	89
PID 1116 wrote to memory of 4248	1116	msedge.exe	89
PID 1116 wrote to memory of 4620	1116	msedge.exe	90
PID 1116 wrote to memory of 4620	1116	msedge.exe	90
PID 1116 wrote to memory of 3336	1116	msedge.exe	91
PID 1116 wrote to memory of 4620	1116	msedge.exe	90
PID 1116 wrote to memory of 3336	1116	msedge.exe	91
PID 1116 wrote to memory of 3336	1116	msedge.exe	91
PID 1116 wrote to memory of 3432	1116	msedge.exe	92
PID 1116 wrote to memory of 1984	1116	msedge.exe	93
PID 1116 wrote to memory of 3432	1116	msedge.exe	92
PID 1116 wrote to memory of 3432	1116	msedge.exe	92
PID 1116 wrote to memory of 1984	1116	msedge.exe	93
PID 1116 wrote to memory of 1984	1116	msedge.exe	93
PID 1116 wrote to memory of 3700	1116	msedge.exe	97
PID 1116 wrote to memory of 4340	1116	msedge.exe	98
PID 1116 wrote to memory of 3700	1116	msedge.exe	97
PID 1116 wrote to memory of 4340	1116	msedge.exe	98
PID 1116 wrote to memory of 536	1116	msedge.exe	100
PID 1116 wrote to memory of 4916	1116	msedge.exe	103
PID 1116 wrote to memory of 4304	1116	msedge.exe	104
PID 1116 wrote to memory of 960	1116	msedge.exe	105
PID 1116 wrote to memory of 2224	1116	msedge.exe	106
PID 1116 wrote to memory of 2224	1116	msedge.exe	106
PID 1116 wrote to memory of 4756	1116	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc0125c188,0x7ffc0125c194,0x7ffc0125c1a0
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,4783937526156781400,16466145046789083558,262144 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,5101225559706552346,5998009131277658826,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,16469774117424731357,3457188144311067652,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,7193603877285885294,11399651495100538618,2097152 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3932674234622058825,13779254843104721718,2097152 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,5145255723409128400,12614160731093387352,2097152 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14482095792170724356,16921405782409615105,2097152 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2164206865989699973,1520889313739076838,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9847817714423614126,8671090817894554495,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9322993162784014444,16249797841606890392,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9322993162784014444,16249797841606890392,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,13995075777498587555,5462497929589072788,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,5813385729653057798,2054168162886645134,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,8398399707561642043,8759539470167761071,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,7671770022633967760,15720842559566476724,524288 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6732,i,16553461504770457886,15925952895949523536,262144 --field-trial-handle=2296,i,14371893410048612474,10487083256170279847,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9a8007805e866030ddef8c0bffd6eec19b553c477bee180584b20c9c94621d55
MD5 f5400134b7975827b28654b3dcb1bdd6
SHA1 7e8ece0707d714e927405149f6d79c09a5c4d741
SHA512 1a774a2d3347b177b206cdb44ef3d8dfa5dc050dc320a393142991f46902ad3f68a035ce5a4ceb798b1663a69be306b2e14c094ed33e586d5db67c58a873f12f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
TLSH
T190B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7b3e462e38131b9fbc583a86545ef092135241e6c8a657a46a0c89e18443a2f6
MD5 2ba3db7c9a0536bab1773646ac0015bb
SHA1 eab06fd129e28a50de82e44bc1c47bfbc97703e9
SHA512 227937e9e08af43a0ffddcce9ccd2ef99782c114683c91880de691cb9ee6778b5f4d107a9ac26829d4901cb5a964c3c19f45ec7e4d5d2d47ed93c2951d3f53ef
TLSH
T152714BB04EDB0663FB60803268E333667731B7FAFC175E9902E24B342795762F45A020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5876d1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5876d1.TMP
Size 3KB
SHA256 8814da1f22214f47dab1c92d281172403c81b07d76ae3e9c65df98bf2b501eae
MD5 7671ff4b29e3bd0960de8e2553a505d0
SHA1 f306c43f821bbc431d27941be3934b56bc32ad48
SHA512 72089957a78b7545660f5dc4cff3df90c54b493f61cc806be10be6f5562f1d6c9ed903c9cf18b09050ec17dbb331a2ac49298143eae955d3dbf6c5dc8a2e367b
TLSH
T19E714CB04EDB0563FB60803168E333667731B7FAFC175E9902E64B312795761F45A024
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cf41ef32286efcefff8fb6dc3b6c661ed08c9ff88a88d1ccb3b85fad151834ec
MD5 67b4c9b53354ead40e9f6093dda393ae
SHA1 f53b18ee591593e3f51d0da14153466085ed9776
SHA512 2977b83f7623058278d3f42a5e4143462dc470b9f557d9e43026515256ebbfa21b964d261633bdeb2db0037ad55920d9ff48ce0debeda2b8e42782e3322d8347
TLSH
T178418DF6C2D8476ED51166F05B256E1ACE1D055A82283C1ACDE5FF5F63F2071D10129F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f596341eea5f569bb2cbc3514ad718f2c13bef0b3a3cdfdaa00de763492476f9
MD5 974c52961483c5942a66b4c1f76e9f23
SHA1 21c3cff9fd77e06e9723faf38b4510f8632480b9
SHA512 bb0abf48a6f07e8d7401f9463e8c6be3b47c970b314826ffbc2108b8ab499030bf0606e8f2153d3379c511409aa6bceb79bd224673a4ec93bce990ef794a702c
SSDEEP 192:sxZQPUORzyM/jK1Ml8Mkbi/f75sEjTpo4IdpdQDHW6+WNGYIkl0UIgrJ:sxZu5Mu/f9sERq4HbGo9
TLSH
T11A42F8156A386977CCDBD209FA557F93D6F50572A2900D44ADFCCA1C04E6AEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 adb6ddc9136c34e80c6878d3dde576727456a3e930157fe0c22a1d74827c6dce
MD5 96994a18a251a917465dd906b02173c6
SHA1 aa2c3410a7b6e1a007796fe2fac882aa77a3f33c
SHA512 7bb3c4c841fabcf1735bb9b8d1930a3d5e1cb4077e382be679bef41dbf5fe59a13fbea0335c5b825ed359a20bcba5edf707e631ba5c634827c5e63da13216789
SSDEEP 192:sxZQPUORzyM/jK1Ml8UQrkbi/f75sEj+po4IdpHQDHW6+WNGYIIU2UIg5vJ:sxZu5qAu/f9sE8qOHbGVr
TLSH
T1405208156A786977CCDBE20DBA41BF93D3F40572A2900E44ADFCCA1C04E6ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4c038d0f54d07604a2d99987b49c3f33f7f4148fb38f4936387cd5036ee407cc
MD5 8238a5a4ea9998832a0467d0fab17a4a
SHA1 4e8bd4fda46c8d5f92455b0022ed6191921e60ae
SHA512 74b5d938d76bbdbaf6fa769edabe62784157f09d556ab757b4ac57d67488d0d2e8249e873e532aa706432d9a4867b20c7b9a526479f2f67b0ed9e0e3efa49c30
SSDEEP 768:E6sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9XroH3j:E6sqxXlWvJD6Tu1ja54LAs9EHT
TLSH
T19ED21C3B694CC77E4F840E9CEC266FD76ED801CBA6988D5447FA884C03CB6EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 22cdbc2f1709476f77b1c5fc9989207c2ea0e5f5bcd1c02664dd8018b6d7ea62
MD5 005dc1759d37070252ee24eb4a4a40d0
SHA1 153f399eb8da1c0e9aea597f335f075f1ec72446
SHA512 411e3e61c9dbaf41e3d571310561855bbae95dfeafc89331373073c02912fdfdd75d54993fbc8547756d993ecf0cab9ffc02817666e8c17626c8365fcd4bae77
SSDEEP 96:KYbaKYIK+P6Ko8uutGKuIRJKKqQaCMwKZ2eoNOSAc:ExZBdPxzBoNOSAc
TLSH
T1C4E13A42713B821238BE6908A27796374E8373A77518A56F7F7870B20E66E114DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f16a5d75-4c7f-496c-b1ad-b63c003738fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f16a5d75-4c7f-496c-b1ad-b63c003738fd.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5af96ad31ff938cece8040b5eaf4a61ebf8ed6ebe541553397aad8d496c7caae
MD5 ccbb5178018a613704dcdc1cd3169dcf
SHA1 29a9e36ef36b6355beca9f2d711197b2e6ab30d9
SHA512 8230f9d5bd3a93522c9eadfcc7f19abe5598c4b85b29c484f3ab901b0eeccbb3968293cbeb2a540b65cee15e897a553b20ba748eb2f889aa9e560225d0487064
SSDEEP 192:uZLsNl4QlSGkRbOI7QmiU1oTbT4VRNVOmSY+y6l9nFLSRsqfsU8:GsNl4k6b5ocVRNVOK+t9FqiU8
TLSH
T1C23229366C785C775DE2A544F44B32139FB4112BAA892FC4D6DC1F0C01EF69C235B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 992f242e006a45e45405e97126d3574dc864eb124239d11a5e4056311fef9166
MD5 d865b72c2c3521cd271da8a86143779d
SHA1 802eba70e82dcf5a617f901a7448542a4e7459d7
SHA512 523d85ab68840f96259885622ee6111624db060c7977c68ee6d1924527e1f1d2e71f1157cf3ba8bdbbdb07725121c75ef10f8385c81527976636cdf266c186cd
SSDEEP 384:JZcIhsNlQk6b5ocVRNVOK+t9FqiOOPrXLpe8C/s:Bh0yHVOKs9oiOi9Pj
TLSH
T154929D719C785C676DF6B944F58722139FF8512BE2C52BC491EC9F0C06DAA58231B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 7d6499747d08dfb2012aded3aa437bdd0306fbc829b3b1de7fcaf10a8a2019a1
MD5 b94342730e807a2bc4e28f2707dd3ab7
SHA1 7d46b774802398fc0b6836704507ffa3b6377697
SHA512 eac0ecc1b32f4f127dcb92d8c5ff3af546c312ccd6ffc897238faa914be5eaa43a590fac83c8bd15396746ce190c4a548579cfd84e7966da9119b813511d2b2d
SSDEEP 384:CiFiZcIvsN/8TUNTUlIlQk6b5ocVRNVOK+t9FPiOOPrXLpe8C/s:JFQv2wg3yHVOKs99iOi9Pj
TLSH
T160A27C729CA88D7BADFAAE44F54A22138FF84177E5C56AD4E2DC9E0C01DB59C130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 77f1b6f9e1d939d0d2b091a98b6665f5e0876dfb861aa308ae1d42d6172af8c9
MD5 2f092eeb3d5122e7c439e209d666b192
SHA1 32845046e4d9a446336fd1734d55c597ab22b2b7
SHA512 0149932bed5e1755d1d4e5502deb5069b271b3289ed7d6cb87f71464118dbadf46c7610471d6725d77f90f30219fc65b5709d7ba4d8292cee84e51ad89f55582
SSDEEP 192:tONc6JkRtQmiUyuiW+RNVOmSY+y9h3fReU6:tONc6Ur8W+RNVOK+G0U6
TLSH
T1CB02D8357D381CBB8EF26E0AB48B27275FA9203BA9856B84D6D81F0C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d421be2ef32a4c74478ab52b1708840b8edc7221592d2823fa622aaaf7d7b27
MD5 942aed47f9a9a554006f8b23287f8620
SHA1 6237c5bf77352c7223283aa82ea0922c8616e1e5
SHA512 5c9f89d1da37efe34a0104b3c2647e8449e11109deb84b88cf08ff0c6df0c3c8208334b1a1533b45489e4cffd94b6d7388ee496acdd2ba66936615dcbcdc593a
SSDEEP 192:0ONg6JkRhQmiUyciM+RNVOmSY+y6l9nF4VcsqfsU6:0ONg6U/kM+RNVOK+t9FPiU6
TLSH
T1F4121B35AC785C775EE26945F48732178FA4522BEA857FC0D5DC1F1C01EFA9C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19005b3c-0ad8-425a-a8f1-552eca946963.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\19005b3c-0ad8-425a-a8f1-552eca946963.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b77e1a21add5cd6813c6137edf2725972a6b7e9588457f079a452a0e2304087b
MD5 dfab4419411e2b94d74b04b874865463
SHA1 96b317660c293424089265dc09024f500f3a44c4
SHA512 a27e998d33c0087f591dcd92793aca8f2ddaed75dae959c2c9641b3fc50595e3f17a01eb6c27576a681dfc366ae1a754ff8e5934c473770b1d2aebd6b75d92d2
TLSH
T12641E798A6FA114CB3776F5AAFF6A86D447BF9772E0A945E10110D4F0A36E00C9B1733
MD5 SHA1 SHA512 TLSH

Submit Download